Member Avatar for Ancient_Hacker
Ancient_Hacker 0 Newbie Poster

I'm looking at a thread info block at fs:[0] and everything looks fine,
except the stack base and limit are $50000 and $70000, which are okay, as I asked for a stack size of $20000.

HOWEVER, the actual ESP is up at $02EExxxx and I can follow the stack chain upwards okay, so the stack really is up at $02EExxxx.

Howcome the TIB lies? Is there some offset that needs to be added to get the right numbers?

  • 1 Contributor
  • 0 Replies
  • 40 Views
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.